1. What is Personal Information and how do we collect it?
Information Privacy Act 2009 defines Personal information as, information or an opinion, including information or an opinion forming part of a database, whether true or not, and whether recorded in a material form or not, about an individual whose identity is apparent, or can reasonably be ascertained, from the information or opinion.
The Personal Information we collect include: Full Names, DoB, Medicare Number, Private Health Insurance Number, Contact details, GP details, and the health details and demographic information in order to serve you better.
2. What Personal Information do we collect and why?
To assist you better with your mental health project and to make sure it is clear that we do not deviate from the primary purpose of providing our services to you. My Mental Health Project will only use your Personal Information for the purposes for which you gave it to us as explicitly specified in this policy and where you would reasonably expect us to use the information. Some of the information we collect are:
-Identity data including name, parents’ or guardians’ details, Medicare number, private health cover details
-Contact data including the email address you used to log into your subscription, school details, address, GP details, School or University counsellor details.
-Demographic information about you such as age, sex and country of living.
-Health details from your medical family tree
-Your Mental Health Details from assessments, screening and diagnostic questionnaire based on your responses and results and our analytics and machine learning.
-Your feedback, messages and contact details you submitted via the contact form and other forms.
-Technical data such as your IP address when you browse our website
-We do not use your contact details for any sort of marketing as we use it to send only emergency notifications and alerts, we do not want to spam you.
For stronger privacy and security we do the registration for a user login for you based on your email ID and name and class you are in provided by your educational institution. This will ensure that your data is completely and truly yours and there is no misidentification. Once you receive the login details and log in, you will be prompted to change the password and complete the registration. In order to log in, you will require CAPTCHA, Security Questions and OTP hence making it very difficult to hack.
We will be collecting a lot of information about you and will not be sharing it with any entity unless you have supplied exclusive consent to do so.
3. Anonymised Data
Anonymised Data is any information that we collect from you and which we don’t collect or from which we remove reference to personally identifiable information so we can use for research, share with trustworthy third parties and for other purposes.
Examples of Anonymised Data we use and share are the results from your assessments or aggregate of your results or aggregate of your whole class explicitly making sure that it does not contain your name, email or any other contactable or identifiable information that can be used to trace back to you.
We may share anonymised data with researchers from universities, government institutions and other reputable institutions with the purpose of furthering science and the understanding of mental health and to develop products and services. We believe the insights we may have from this data could improve the lives of millions of people worldwide. We also adapt machine learning and AI technology in future phases which will be able to assess and predict your mental health much better than what we can do with the current technology and this could be very crucial for your wellbeing.
We would use anonymised data to track your progress and use such information to increase the uptake of our services. We only share aggregated data and from a relatively high minimum number of respondents (20 or more) in order to preserve anonymity. We believe the insights that this data provides those organisations enables them to create policies and initiatives that will improve the lives of people connected to them.
We may share Anonymised Data with Government organisations for the purposes of understanding and improving public health policies, funding and initiatives.
We may share Anonymised Data with other health and mental health solutions providers with the intent to improve their services and the effectiveness of their solutions for helping people with mental health conditions.
4. Cookies and Google Analytics
5. Sensitive Information
Sensitive information is defined in the Privacy Act to include information or opinion about such things as an individual’s racial or ethnic origin, political opinions, membership of a political association, religious or philosophical beliefs, membership of a trade union or other professional body, sexuality and gender, criminal record or health information obtained via assessments.
These Sensitive information will be used by us only for the primary purpose for which it was obtained; For a secondary purpose that is directly related to the primary purpose with your consent; or where required or authorised by law.
Essentially we collect Sensitive Information related to My Mental Health questionnaire answers, results of assessments and your preferences. We will only disclose personally identifiable Sensitive Information to you and to the people/users that you explicitly consent share it with.
My Mental Health Project will use the collection of information and results to produce statistics and reports for ourselves and third parties who could potentially provide you care and service in future. In these cases, we will only produce non-identifiable data, protecting your anonymity.
Please ensure that your login details are kept confidential and your phone is close to you to use our services with strong security features.
6. Disclosure of Personal Information
My Mental Health Project will never share personally identifiable data with any third-party without your consent, your Personal Information may be disclosed in a number of circumstances including the following:
-For research and other purposes, as per Anonymised Data section above.
-Third parties where you explicitly consent to the use or disclosure (eg. if you choose to share your mental health history and assessment results with a mental health professional or institution for receiving further care and support); and
-Where required to keep you safe or authorised by law.
When you do not expressly share your personal information with specific third parties, we may produce statistics or reports for ourselves or third parties by using a limited set of your personal information that do not identify you as a person. In these cases, we will only produce aggregated non-identifiable results, protecting your anonymity.
7. Security of Personal Information
Your Personal Information is stored under 3 to 4 layers of security that reasonably protects it from misuse and loss and from unauthorized access, modification or disclosure. We will take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information.
Unfortunately, data transmission over the internet is inherently insecure, and we cannot guarantee the security of data sent over the internet. You are responsible for keeping your password, Mobile phone to receive OTP and user details confidential. We will not ask you for your password (except when you log in to the website).
Our applications and websites may contain links to other sites, web pages, audibles, videos, avatar maker and videos. While we try to only link to sites that share our high standards and respect for privacy, we are not responsible for the content or the privacy practices employed by other sites. Please be aware that the websites that have links on our site may collect personally identifiable information about you. This privacy statement does not cover the information practices of those websites.
8. Data Storage
We may collect and store any or all of the information you provide on the website which is hosted on a secure server and is SSL certified.
9. Data Breaches
We will report any unlawful data breach of this website’s database or the database(s) of any of our third party data processors to any and all relevant persons and authorities within 72 hours of the breach if it is apparent that personal data stored in an identifiable manner has been stolen.
10. Access to your Personal Information
You have various rights in respect of the personal information we hold about you, including:
- Access to your personal information: You have the right to request access to a copy of the personal information that we hold about you, along with information on what personal information we use, why we use it, who we share it with, how long we keep it for and whether it has been used for any automated decision making. You can make a request for access free of charge.
- Right to object: You can object to our processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
- Consent: If you have given us your consent to use personal information, you can withdraw your consent at any time.
Note that no organisations other than My Mental Health Project may be able to access your data. Identifiable data will be provided to school or university counsellor or mental health professional in case of our serious incident tool is triggered by your responses and ongoing serious incident is detected or there is a mental health crisis detected as your personal safety then takes priority over privacy. Even at this stage only your name and class number and the testing result code is passed on as an alert for emergency action.
My Mental Health Project will not charge any fee for your access request, but may charge an administrative fee for providing a copy of your Personal Information. In order to protect your Personal Information we may require identification or proof of ownership from you before releasing the requested information.
11. Policy Updates